摘要
分布式拒绝服务攻击(Distributed Denial of Service)是一种攻击者使用各种方法,试图将攻击目标的网络资源和系统资源消耗殆尽,使之无法向真正的合法用户提供服务的攻击。随着技术的进一步发展,基于网络层上的DDOS攻击得到了很大程度上的削弱。然而,越来越多的攻击出现在了应用层,攻击的形式更加多样和复杂。从下层协议的角度来看,攻击中涉及的流量可能是合法的,使得检测和防范工作愈发困难。文中以实例为基础,解释基于应用层的攻击原理和方法,结合现有的技术,总结出检测和防范的机制并进行改进。
Distributed Denial of Service is an attempt to make a machine or network resource unavailable to its intended users. With the further development of technology, DDOS attacks on the network layer have been largely weakened. However, more and more attacks occur in the application layer with various and more complicated forms. Attack traffic may be legitimate from the view of the lower layer protocol, which makes the detection and prevention more difficult. This article explained the discipline and measures of application DI）OS attack by instances, summarizes and improves the mechanism of detection and prevention with present technology.
出处
《计算机科学》
CSCD
北大核心
2013年第11A期175-177,共3页
Computer Science
